On 27-Aug-2000 Gary Jones wrote: > I'm sorry, make that three attempts. The fuckwits can FOAD - all such > attempts are logged and sent to the appropriate abuse / postmaster > addresses.
I have been on a DSL connection for a few weeks, and my IP address will change about once a week. Since the most recent IP address change, I have been seeing in my logs attempted connections to ports 137, 138, and 139 but I am not concerned because I am guessing that someone was running a server there before I got the IP address. Once I start seeing attempts from one host/net to connect to multiple ports, I get concerned and I e-mail their abuse address. I run portsentry and logcheck together and it works well for me. -- Andrew